Re: virus detection - empty DOC or XLS with a macro

2015-10-20 Thread Ruprecht Helms
Hi, > I still haven't worked out how to check for macros yet but the text has been > sorted I think you can find out how to handle embeded macros is to produce a excelsheet, record a macro and save the whole as a new excelfile. I don't know if the vba-code is stored as a binarypart in the file.

Re: virus detection - empty DOC or XLS with a macro

2015-10-20 Thread Gary Stainburn
I still haven't worked out how to check for macros yet but the text has been sorted #!/usr/bin/perl use strict; use warnings; use Text::Extract::Word; use Spreadsheet::ParseExcel; use Spreadsheet::ParseXLSX; use File::Basename; if (!$ARGV[0]) { die "Usage: $0 "; } if (! -r $ARGV[0]) { die

Re: virus detection - empty DOC or XLS with a macro

2015-10-20 Thread Gary Stainburn
I already have ClamAV, Spamassassin and exim.filters on my Centos server as well as SPAM+Anti-Virus on our firewall. These are still getting through which is why I'm looking for a way to filter this specific problem. I've got a work-around by using unconv and Libreoffice to convert the documen

Re: virus detection - empty DOC or XLS with a macro

2015-10-19 Thread Wah Peng
Hi, I think you'd better setup a antivirus/antispam gateway for the incoming emails.ClamAV and Spamassassin are what you may want to check. regards. On 2015/10/19 ζ˜ŸζœŸδΈ€ 18:35, Gary Stainburn wrote: Is there any way within Perl to examine DOC and XLS files to 1) see if the document is empty, i

virus detection - empty DOC or XLS with a macro

2015-10-19 Thread Gary Stainburn
Is there any way within Perl to examine DOC and XLS files to 1) see if the document is empty, i.e. no text and no cell contents 2) has Macros embedded We're getting lots of virus emails claiming to be invoices, receipts, etc. with documents that match the above criteria which actually contain a